$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f5049ef-620a-390e-85da-ccb470b65b84.roa File: 7f5049ef-620a-390e-85da-ccb470b65b84.roa (raw, json) Hash identifier: fgu4NVA+GWcZ9o5NFS3MZOjjlIko88UOs63VgdjnGrw= Subject key identifier: A1:1F:B1:AA:28:B4:02:4C:A7:91:B4:69:1B:48:75:D3:0D:91:DC:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C9D9729D8B93DF221900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f5049ef-620a-390e-85da-ccb470b65b84.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.41.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c9:d9:72:9d:8b:93:df:22:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=435eedca-d293-4937-b1d5-056029c4e07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:15:a6:9b:c0:89:46:25:04:62:a7:31:7b: da:12:cd:1b:80:8a:83:f8:d7:eb:8d:28:cf:c6:ca: 85:7a:e8:36:79:1e:b2:62:78:ea:64:cb:7c:ef:c9: 4c:0c:d1:08:d7:f4:0e:d5:88:0f:5b:66:0a:1a:5d: 26:41:63:47:48:ae:20:eb:50:a5:b2:95:f1:9e:6b: 93:3b:93:03:5a:f6:31:e8:1f:d8:12:bf:bd:55:0e: 40:23:e2:f9:91:04:42:58:2f:50:de:b8:25:72:13: 90:d0:ed:00:0e:c6:38:41:94:28:ef:70:2e:4f:c1: 2c:45:3c:eb:d9:b7:35:06:ef:9d:68:ec:90:b5:2a: ae:c8:fb:35:27:d9:06:26:08:ce:7b:8b:d4:30:e6: 25:9e:e3:a4:52:8e:2d:86:bf:22:78:8f:ca:49:69: 7c:b8:63:bb:e5:b9:b1:25:6e:07:b4:7f:9b:cd:c8: 67:27:63:ac:22:9f:7f:48:77:f3:83:0a:2d:0d:9f: ce:19:7b:cb:24:86:d9:e9:9c:8b:0b:da:7c:0b:ea: 1d:10:3b:db:68:55:e3:ad:62:e3:be:b6:ee:51:03: da:52:45:f5:13:6f:32:77:1f:12:e3:8b:37:16:52: a4:d5:9c:1c:4e:1c:34:36:07:da:c1:d4:cc:ef:56: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1F:B1:AA:28:B4:02:4C:A7:91:B4:69:1B:48:75:D3:0D:91:DC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f5049ef-620a-390e-85da-ccb470b65b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:87:54:ff:bc:ea:c3:d8:62:e9:30:e1:ca:77:aa:7a:e4:bc: 0b:88:9d:2c:e2:a8:d6:73:99:3e:58:d3:4b:46:c9:1a:bf:3b: 4d:9d:3d:62:be:e2:37:e0:fb:ad:b0:c3:b5:68:a7:0f:ef:ff: c4:59:e6:63:1d:7b:e9:46:7e:6d:c0:5d:5c:87:1b:40:5a:6d: 47:a7:33:ba:e2:54:ae:54:06:0f:a0:9d:6c:8a:79:d9:76:63: 8a:39:a6:4b:67:90:4c:d6:09:8a:5b:85:c4:e2:97:d9:0a:41: 9b:9e:a2:5a:05:97:53:a1:f5:2d:e9:9e:a1:92:75:fe:f5:28: e3:16:af:71:ea:cd:c9:e1:14:3d:40:56:7b:d1:51:ce:37:d3: 58:82:dc:1d:c7:9c:39:c2:00:16:9c:7d:5d:18:82:05:eb:e6: f6:03:26:de:bb:06:9d:8e:44:7e:27:fe:d3:66:e6:5f:78:68: 98:0b:3b:55:f7:f6:1e:f7:33:90:1f:73:6b:a4:35:95:56:f1: bf:e5:e8:7a:8c:51:54:3f:b2:88:44:d2:de:c4:e2:ce:ee:d7: a4:8b:15:90:c4:40:b3:b8:5d:8d:2f:bf:13:5b:5c:86:f2:9f: 69:97:77:a8:3b:65:ef:5f:6a:27:09:97:12:d5:2a:c8:b6:5b: 40:a2:6b:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98nZcp2Lk98iGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDM1ZWVkY2EtZDI5My00OTM3LWIxZDUtMDU2MDI5YzRlMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU4VppvAiUYlBGKnMXvaEs0bgIqD+NfrjSjP xsqFeug2eR6yYnjqZMt878lMDNEI1/QO1YgPW2YKGl0mQWNHSK4g61ClspXxnmuT O5MDWvYx6B/YEr+9VQ5AI+L5kQRCWC9Q3rglchOQ0O0ADsY4QZQo73AuT8EsRTzr 2bc1Bu+daOyQtSquyPs1J9kGJgjOe4vUMOYlnuOkUo4thr8ieI/KSWl8uGO75bmx JW4HtH+bzchnJ2OsIp9/SHfzgwotDZ/OGXvLJIbZ6ZyLC9p8C+odEDvbaFXjrWLj vrbuUQPaUkX1E28ydx8S44s3FlKk1ZwcThw0NgfawdTM71YqdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEfsaootAJMp5G0aRtIddMNkdygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2Y1MDQ5ZWYtNjIwYS0z OTBlLTg1ZGEtY2NiNDcwYjY1Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeHVP+86sPYYukw4cp3qnrkvAuInSziqNZzmT5Y00tGyRq/O02dPWK+ 4jfg+62ww7Vopw/v/8RZ5mMde+lGfm3AXVyHG0BabUenM7riVK5UBg+gnWyKedl2 Y4o5pktnkEzWCYpbhcTil9kKQZueoloFl1Oh9S3pnqGSdf71KOMWr3HqzcnhFD1A VnvRUc4301iC3B3HnDnCABacfV0YggXr5vYDJt67Bp2ORH4n/tNm5l94aJgLO1X3 9h73M5Afc2ukNZVW8b/l6HqMUVQ/sohE0t7E4s7u16SLFZDEQLO4XY0vvxNbXIby n2mXd6g7Ze9faicJlxLVKsi2W0Cia88= -----END CERTIFICATE-----Generated at Tue Sep 22 01:56:20 2026 by rpki-client